WHAT IS CLAIMED IS: 

1 . A method for use in a server, comprising: 

receiving a signal representing a request from a remote user for a secure resource 
residing on a network employing a generic application-layer network protocol; 
5 determining, without the intervention of the user, the type of security credential 

required to access the secure resource; and 

sending a signal representing a second request to the secure resource, the second 
request including a security credential for the user of the type required to access the secure 
resource. 

10 

2. The method of claim 1, further comprising: 

authenticating the user before sending the signal representing the second request. 



3 . The method of claim 1 , further comprising: 

15 receiving a signal representing a response to the second request; and 

sending a signal representing a result to the remote user, the result based on the 
response to the second request. 

4. The method of claim 1, wherein the request includes a logon credential for the 
20 remote user, further comprising: 

authenticating the remote user based on the logon credential before sending the 
second request. 

5. The method of claim 1, wherein the request includes a logon credential for the 
25 remote user and the type of security credential required to access the secure resource includes 

the logon credential, farther comprising: 

sending the signal representing the second request to the secure resource, the second 
request including the logon credential. 
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6. The method of claim 1 , wherein the request includes a logon credential for the 
remote user, further comprising: 
Atty. Docket No. PLM007001 19 



receiving a signal representing a single-sign-on (SSO) credential generated by a SSO 
provider based on the logon credential; and 

sending a signal representing the SSO credential to the secure resource when the type 
of credential required to access the secure resource includes the SSO credential. 

7. The method of claim 6, further comprising: 

sending a signal representing the SSO credential to the secure resource when the type 
of credential required to access the secure resource includes a second SSO token 
corresponding to a second SSO provider having a trust relationship with a first SSO provider 
corresponding to the SSO token. 

8. The method of claim 6, further comprising: 

receiving a signal representing a second SSO credential generated by a second SSO 
provider based on the first SSO credential; and 

sending a signal representing the second SSO credential to the secure resource when 
the type of credential required to access the secure resource includes the second SSO 
credential. 

9. The method of claim 1 , wherein the generic application-layer network 
protocol is hypertext transfer protocol 

1 0. The method of claim 9, further comprising: 

receiving a signal representing data in response to the second request; and 
sending a signal representing at least a portion of the data to the remote user. 

1 1 . The method of claim 1 0, wherein the Web resource includes a Web site, and 
the data is hypertext mark-up language. 

12. The method of claim 1, wherein receiving includes receiving a signal 
representing a request from the remote user for a second secure resource residing on the 
network, further comprising: 
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determining, without the intervention of the user, the type of security credential 
required to access the second secure resource; and 

sending a signal representing a third request to the second secure resource, the third 
request including a security credential for the user of the type required to access the second 
secure resource; and wherein 

the signals representing the second and third requests are sent concurrently. 

1 3 . The method of claim 1 2, wherein the types of security credentials included in 
the second and third requests differ. 

14. The method of claim 12, wherein the types of security credentials included in 
the second and third requests are the same. 

1 5 . The method of claim 1 , further comprising: 

receiving a signal representing the security credential from the user before receiving 
the signal representing the request. 

1 6. The method of claim 15, further comprising: 

storing the security credential at least until sending the signal representing the second 
request. 

17. An apparatus for use in a server, comprising: 

means for receiving a signal representing a request from a remote user for a secure 
resource residing on a network employing a generic application-layer network protocol; 

means for determining, without the intervention of the user, the type of security 
credential required to access the secure resource; and 

means for sending a signal representing a second request to the secure resource, the 
second request including a security credential for the user of the type required to access the 
secure resource. 

1 8. The apparatus of claim 17, further comprising: 
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means for authenticating the user before sending the signal representing the second 
request. 

19. The apparatus of claim 17, further comprising: 

means for receiving a signal representing a response to the second request; and 
means for sending a signal representing a result to the remote user, the result based on 
the response to the second request. 

20. The apparatus of claim 17, wherein the request includes a logon credential for 
the remote user, farther comprising: 

means for authenticating the remote user based on the logon credential before sending 
the second request. 

21 . The apparatus of claim 1 7, wherein the request includes a logon credential for 
the remote user and the type of security credential required to access the secure resource 
includes the logon credential, further comprising: 

means for sending the signal representing the second request to the secure resource, 
the second request including the logon credential. 

22. The apparatus of claim 17, wherein the request includes a logon credential for 
the remote user, further comprising: 

means for receiving a signal representing a single-sign-on (SSO) credential generated 
by a SSO provider based on the logon credential; and 

means for sending a signal representing the SSO credential to the secure resource 
when the type of credential required to access the secure resource includes the SSO 
credential. 

23. The apparatus of claim 22, further comprising: 

means for sending a signal representing the SSO credential to the secure resource 
when the type of credential required to access the secure resource includes a second SSO 
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token corresponding to a second SSO provider having a trust relationship with a first SSO 
provider corresponding to the SSO token. 

24. The apparatus of claim 22, further comprising: 
5 means for receiving a signal representing a second SSO credential generated by a 

second SSO provider based on the first SSO credential; and 

means for sending a signal representing the second SSO credential to the secure 
resource when the type of credential required to access the secure resource includes the 
second SSO credential. 

10 

25. The apparatus of claim 17, wherein the generic application-layer network 
protocol is hypertext transfer protocol. 

26. The apparatus of claim 25, further comprising: 

means for receiving a signal representing data in response to the second request; and 
means for sending a signal representing at least a portion of the data to the remote 

27. The apparatus of claim 26, wherein the Web resource includes a Web site, and 
O20 the data is hypertext mark-up language. 

x 

28. The apparatus of claim 17, wherein means for receiving includes means for 
receiving a signal representing a request from the remote user for a second secure resource 
residing on the network, further comprising: 

25 means for determining, without the intervention of the user, the type of security 

credential required to access the second secure resource; and 

means for sending a signal representing a third request to the second secure resource, 

the third request including a security credential for the user of the type required to access the 

second secure resource; and wherein 
30 the signals representing the second and third requests are sent concurrently. 
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29. The apparatus of claim 28, wherein the types of security credentials included 
in the second and third requests differ. 

30. The apparatus of claim 28, wherein the types of security credentials included 
in the second and third requests are the same. 

3 1 . The apparatus of claim 1 7, further comprising: 

means for receiving a signal representing the security credential from the user before 
receiving the signal representing the request. 

32. The apparatus of claim 3 1 , further comprising: 

means for storing the security credential at least until sending the signal representing 
the second request. 

33 . Computer-readable media tangibly embodying a program of instructions 
executable by a computer to perform a method for use in a server, the method comprising: 

receiving a signal representing a request from a remote user for a secure resource 
residing on a network employing a generic application-layer network protocol; 

determining, without the intervention of the user, the type of security credential 
required to access the secure resource; and 

sending a signal representing a second request to the secure resource, the second 
request including a security credential for the user of the type required to access the secure 
resource. 

34. The media of claim 33, wherein the method further comprises: 
authenticating the user before sending the signal representing the second request. 

35. The media of claim 33, wherein the method further comprises: 
receiving a signal representing a response to the second request; and 
sending a signal representing a result to the remote user, the result based on the 

response to the second request. 
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36. The media of claim 33, wherein the request includes a logon credential for the 
remote user, wherein the method further comprises: 

authenticating the remote user based on the logon credential before sending the 
second request. 

37. The media of claim 33, wherein the request includes a logon credential for the 
remote user and the type of security credential required to access the secure resource includes 
the logon credential, wherein the method further comprises: 

sending the signal representing the second request to the secure resource, the second 
request including the logon credential. 

38. The media of claim 33, wherein the request includes a logon credential for the 
remote user, wherein the method further comprises: 

receiving a signal representing a single-sign-on (SSO) credential generated by a SSO 
provider based on the logon credential; and 

sending a signal representing the SSO credential to the secure resource when the type 
of credential required to access the secure resource includes the SSO credential. 

39. The media of claim 38, wherein the method further comprises: 

sending a signal representing the SSO credential to the secure resource when the type 
of credential required to access the secure resource includes a second SSO token 
corresponding to a second SSO provider having a trust relationship with a first SSO provider 
corresponding to the SSO token. 

40. The media of claim 38, wherein the method further comprises: 
receiving a signal representing a second SSO credential generated by a second SSO 

provider based on the first SSO credential; and 

sending a signal representing the second SSO credential to the secure resource when 
the type of credential required to access the secure resource includes the second SSO 
credential. 
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41 . The media of claim 33, wherein the generic application-layer network 
protocol is hypertext transfer protocol. 

42. The media of claim 41 , wherein the method further comprises: 
receiving a signal representing data in response to the second request; and 
sending a signal representing at least a portion of the data to the remote user. 

43. The media of claim 42, wherein the Web resource includes a Web site, and the 
data is hypertext mark-up language. 

44. The media of claim 33, wherein receiving includes receiving a signal 
representing a request from the remote user for a second secure resource residing on the 
network, wherein the method further comprises: 

determining, without the intervention of the user, the type of security credential 
required to access the second secure resource; and 

sending a signal representing a third request to the second secure resource, the third 
request including a security credential for the user of the type required to access the second 
secure resource; and wherein 

the signals representing the second and third requests are sent concurrently. 

45. The media of claim 44, wherein the types of security credentials included in 
the second and third requests differ. 

46. The media of claim 44, wherein the types of security credentials included in 
the second and third requests are the same. 

47. The media of claim 33, wherein the method further comprises: 

receiving a signal representing the security credential from the user before receiving 
the signal representing the request. 
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48. The media of claim 47, wherein the method further comprises: 
storing the security credential at least until sending the signal representing the second 
request. 



Atfy. Docket No. PLM007001 



27 



